Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/dfef8194-204a-3e7b-919c-616dade0fb88.roa
File:                     dfef8194-204a-3e7b-919c-616dade0fb88.roa (raw, json)
Hash identifier:          ooVXwchN7CC6WVaIQ+MRnmG8pM1Lvg7vwX31GRTtQSU=
Subject key identifier:   08:86:63:15:C9:E1:A2:29:CB:49:9F:3F:1A:BB:F2:83:D4:4F:28:EB
Certificate issuer:       /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial:       010D0C9F4328584A225AC8DA5E560F60D60F78F0
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/dfef8194-204a-3e7b-919c-616dade0fb88.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        216.198.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:c8:da:5e:56:0f:60:d6:0f:78:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=7a22853f-9e7a-4b3f-bb5b-f90361b9344d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:04:68:40:da:5a:1c:32:62:87:61:c9:00:
                    27:6a:34:55:d2:c9:0d:04:d6:54:27:d1:bc:2c:f4:
                    02:a3:6e:1a:38:48:94:c2:b7:fe:a2:11:68:63:14:
                    1d:99:bf:77:f4:87:2b:ad:03:59:6b:48:d2:8c:be:
                    f9:b2:a4:38:1c:83:e5:bb:8f:11:eb:a7:3d:fb:bd:
                    d2:f0:3f:16:9d:a0:74:83:41:b2:c8:82:97:3e:fa:
                    18:51:1a:f6:74:1d:6b:4b:f8:e3:8b:a4:4e:97:01:
                    d1:aa:d7:c4:e5:71:fe:c5:a5:3e:88:06:e7:94:ac:
                    39:ab:69:b3:d8:39:06:2d:1b:98:71:b3:41:d4:9e:
                    f2:48:65:a2:a0:0a:2f:53:c9:dd:b3:16:0a:d7:bc:
                    f6:2b:f6:6f:0d:29:97:01:80:f4:c9:52:8d:63:35:
                    5d:b0:73:1b:67:28:ec:1d:1d:87:b3:04:c7:88:c6:
                    74:7a:6b:7b:3d:3b:6d:ba:60:86:b9:71:4a:d4:8a:
                    d7:ea:e8:5a:83:77:38:02:a8:eb:dc:af:63:95:72:
                    5f:77:02:5c:39:0f:56:67:4c:00:fa:80:d6:23:c9:
                    df:3d:e8:a3:eb:22:9e:cb:da:0c:11:a4:96:4c:6c:
                    1f:2e:d9:c8:5c:6e:19:f9:50:e7:38:46:a6:f8:a8:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:86:63:15:C9:E1:A2:29:CB:49:9F:3F:1A:BB:F2:83:D4:4F:28:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/dfef8194-204a-3e7b-919c-616dade0fb88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl

            X509v3 Authority Key Identifier:
                keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f6:6c:c7:c9:1e:c1:2e:8b:9d:f8:e1:64:78:c9:8b:7c:3f:
         27:de:41:54:fc:ba:83:fa:c2:06:a6:f6:e6:d0:4b:64:9b:25:
         49:4d:6e:f6:38:94:5b:3d:94:a6:6f:8a:84:c1:ca:1b:d1:c0:
         2e:73:3e:90:88:e8:a9:55:ff:8e:14:ac:6f:3b:b3:e6:c3:d0:
         89:ed:5a:92:a3:7a:e0:c7:cd:8e:a9:c0:cc:99:e9:e1:90:72:
         17:78:ef:48:f2:2c:2f:bc:af:a9:c2:68:c0:d7:f7:fd:b8:03:
         8b:68:da:dc:65:7a:0e:94:8d:8e:08:5f:f7:4d:e7:9c:88:86:
         ad:63:78:5b:66:c9:bf:3f:86:86:50:58:ef:5f:5c:bf:41:ca:
         cd:a3:73:0b:06:47:4a:16:f4:e0:af:f2:fd:83:4c:c7:fa:c2:
         1a:cd:7e:7c:f8:86:10:fe:b1:93:05:38:35:c3:66:48:f0:31:
         54:6a:3e:96:99:0f:27:7f:9b:cd:77:88:d6:2e:c5:dc:4c:44:
         49:ec:ef:e0:f0:35:ab:5b:a9:b5:e6:47:9f:fd:9a:70:40:e7:
         5d:9f:32:4e:52:a6:57:de:ab:72:c8:9b:11:e4:55:a2:cc:8b:
         7f:49:61:2b:71:be:6a:18:4d:47:60:8e:a7:31:14:91:73:65:
         40:bb:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:49:20 2025 by rpki-client